zeitlich 0.2.49 → 0.2.50

package/src/{adapters/sandbox/inmemory/proxy.ts → test-utils/in-memory-sandbox-proxy.ts}

@@ -1,26 +1,15 @@
 /**
- * Workflow-safe proxy for in-memory sandbox operations.
+ * Test-only workflow-safe proxy for the in-memory sandbox fixture.
  *
- * Import this from `zeitlich/adapters/sandbox/inmemory/workflow`
- * in your Temporal workflow files.
- *
- * By default the scope is derived from `workflowInfo().workflowType`,
- * so activities are automatically namespaced per workflow.
- *
- * @example
- * ```typescript
- * import { proxyInMemorySandboxOps } from 'zeitlich/adapters/sandbox/inmemory/workflow';
- *
- * // Auto-scoped to the current workflow name
- * const sandbox = proxyInMemorySandboxOps();
- * ```
+ * Not part of the shipped public surface — used by the capability-type
+ * fixtures to exercise the full-capability proxy shape.
  */
 import { proxyActivities, workflowInfo } from "@temporalio/workflow";
 import type {
   SandboxCreateOptions,
   SandboxOps,
-} from "../../../lib/sandbox/types";
-import type { InMemoryCaps } from "./index";
+} from "../lib/sandbox/types";
+import type { InMemoryCaps } from "./in-memory-sandbox";
 
 const ADAPTER_PREFIX = "inMemory";
 

package/src/{adapters/sandbox/inmemory/index.ts → test-utils/in-memory-sandbox.ts}

@@ -1,3 +1,11 @@
+/**
+ * Test-only in-memory {@link Sandbox} provider backed by `just-bash`.
+ *
+ * This is **not** part of the shipped public surface — it lives under
+ * `src/test-utils` purely so the sandbox manager, tool handlers, and
+ * capability-type fixtures have a lightweight, fully-featured backend to
+ * exercise against. `just-bash` is a dev dependency for the same reason.
+ */
 import {
   Bash,
   InMemoryFs,
@@ -18,9 +26,9 @@ import type {
   ExecResult,
   DirentEntry,
   FileStat,
-} from "../../../lib/sandbox/types";
-import { SandboxNotFoundError } from "../../../lib/sandbox/types";
-import { getShortId } from "../../../lib/thread/id";
+} from "../lib/sandbox/types";
+import { SandboxNotFoundError } from "../lib/sandbox/types";
+import { getShortId } from "../lib/thread/id";
 
 // ============================================================================
 // Adapter: IFileSystem → SandboxFileSystem

package/src/tools/bash/bash.test.ts

@@ -2,7 +2,7 @@ import { describe, expect, it, beforeEach } from "vitest";
 import { bashHandler } from "./handler";
 import { withSandbox } from "../../lib/tool-router/with-sandbox";
 import { SandboxManager } from "../../lib/sandbox/manager";
-import { InMemorySandboxProvider } from "../../adapters/sandbox/inmemory/index";
+import { InMemorySandboxProvider } from "../../test-utils/in-memory-sandbox";
 import type { RouterContext } from "../../lib/tool-router/types";
 import type { Sandbox, SandboxCreateOptions } from "../../lib/sandbox";
 

package/src/tools/edit/handler.test.ts

@@ -1,5 +1,5 @@
 import { beforeEach, describe, expect, it } from "vitest";
-import { InMemorySandboxProvider } from "../../adapters/sandbox/inmemory/index";
+import { InMemorySandboxProvider } from "../../test-utils/in-memory-sandbox";
 import type { Sandbox, SandboxCreateOptions } from "../../lib/sandbox";
 import { SandboxManager } from "../../lib/sandbox/manager";
 import type { RouterContext } from "../../lib/tool-router/types";

package/tsup.config.ts

@@ -15,9 +15,6 @@ export default defineConfig({
     "adapters/thread/anthropic/index": "src/adapters/thread/anthropic/index.ts",
     "adapters/thread/anthropic/workflow":
       "src/adapters/thread/anthropic/proxy.ts",
-    "adapters/sandbox/inmemory/index": "src/adapters/sandbox/inmemory/index.ts",
-    "adapters/sandbox/inmemory/workflow":
-      "src/adapters/sandbox/inmemory/proxy.ts",
     "adapters/sandbox/daytona/index": "src/adapters/sandbox/daytona/index.ts",
     "adapters/sandbox/daytona/workflow":
       "src/adapters/sandbox/daytona/proxy.ts",
@@ -38,7 +35,8 @@ export default defineConfig({
     /^@anthropic-ai\//,
     /^@daytonaio\//,
     /^@e2b\//,
-    "ioredis",
+    "redis",
+    /^@redis\//,
     "@mongodb-js/zstd",
     "node-liblzma",
   ],

package/dist/adapters/sandbox/inmemory/index.cjs

@@ -1,214 +0,0 @@
-'use strict';
-
-var justBash = require('just-bash');
-var common = require('@temporalio/common');
-var workflow = require('@temporalio/workflow');
-
-// src/adapters/sandbox/inmemory/index.ts
-var SandboxNotFoundError = class extends common.ApplicationFailure {
-  constructor(sandboxId) {
-    super(`Sandbox not found: ${sandboxId}`, "SandboxNotFoundError", true);
-  }
-};
-var BASE62 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
-function getShortId(length = 12) {
-  const hex = workflow.uuid4().replace(/-/g, "");
-  let result = "";
-  for (let i = 0; i < length; i++) {
-    const byte = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-    result += BASE62[byte % BASE62.length];
-  }
-  return result;
-}
-
-// src/adapters/sandbox/inmemory/index.ts
-function toSandboxFs(fs) {
-  const workspaceBase = "/";
-  const normalisePath = (path) => fs.resolvePath(workspaceBase, path);
-  return {
-    workspaceBase,
-    readFile: (path) => fs.readFile(normalisePath(path)),
-    readFileBuffer: (path) => fs.readFileBuffer(normalisePath(path)),
-    writeFile: (path, content) => fs.writeFile(normalisePath(path), content),
-    appendFile: (path, content) => fs.appendFile(normalisePath(path), content),
-    exists: (path) => fs.exists(normalisePath(path)),
-    stat: async (path) => {
-      const s = await fs.stat(normalisePath(path));
-      return {
-        isFile: s.isFile,
-        isDirectory: s.isDirectory,
-        isSymbolicLink: s.isSymbolicLink,
-        size: s.size,
-        mtime: s.mtime
-      };
-    },
-    mkdir: (path, opts) => fs.mkdir(normalisePath(path), opts),
-    readdir: (path) => fs.readdir(normalisePath(path)),
-    readdirWithFileTypes: async (path) => {
-      const dirPath = normalisePath(path);
-      if (!fs.readdirWithFileTypes) {
-        const names = await fs.readdir(dirPath);
-        return Promise.all(
-          names.map(async (name) => {
-            const childPath = fs.resolvePath(dirPath, name);
-            const s = await fs.stat(childPath);
-            return {
-              name,
-              isFile: s.isFile,
-              isDirectory: s.isDirectory,
-              isSymbolicLink: s.isSymbolicLink
-            };
-          })
-        );
-      }
-      return fs.readdirWithFileTypes(dirPath);
-    },
-    rm: (path, opts) => fs.rm(normalisePath(path), opts),
-    cp: (src, dest, opts) => fs.cp(normalisePath(src), normalisePath(dest), opts),
-    mv: (src, dest) => fs.mv(normalisePath(src), normalisePath(dest)),
-    readlink: (path) => fs.readlink(normalisePath(path)),
-    resolvePath: (base, p) => fs.resolvePath(normalisePath(base), p)
-  };
-}
-var InMemorySandboxImpl = class {
-  constructor(id, justBashFs, options) {
-    this.id = id;
-    this.justBashFs = justBashFs;
-    this.fs = toSandboxFs(justBashFs);
-    this.bashOptions = {
-      executionLimits: { maxStringLength: 52428800 },
-      ...options?.bashOptions
-    };
-  }
-  id;
-  justBashFs;
-  capabilities = {
-    filesystem: true,
-    execution: true,
-    persistence: true
-  };
-  fs;
-  bashOptions;
-  async exec(command, _options) {
-    const bash = new justBash.Bash({ ...this.bashOptions, fs: this.justBashFs });
-    const { exitCode, stderr, stdout } = await bash.exec(command);
-    return { exitCode, stdout, stderr };
-  }
-  async destroy() {
-  }
-  /** Expose the underlying IFileSystem for snapshot serialisation */
-  _getJustBashFs() {
-    return this.justBashFs;
-  }
-};
-var IN_MEMORY_CAPS = [
-  "pause",
-  "resume",
-  "snapshot",
-  "restore",
-  "fork"
-];
-var InMemorySandboxProvider = class {
-  constructor(defaultOptions) {
-    this.defaultOptions = defaultOptions;
-  }
-  defaultOptions;
-  id = "inMemory";
-  capabilities = {
-    filesystem: true,
-    execution: true,
-    persistence: true
-  };
-  supportedCapabilities = new Set(
-    IN_MEMORY_CAPS
-  );
-  sandboxes = /* @__PURE__ */ new Map();
-  async get(id) {
-    const sandbox = this.sandboxes.get(id);
-    if (!sandbox) throw new SandboxNotFoundError(id);
-    return sandbox;
-  }
-  async destroy(id) {
-    const sandbox = this.sandboxes.get(id);
-    if (sandbox) {
-      await sandbox.destroy();
-      this.sandboxes.delete(id);
-    }
-  }
-  async pause(_sandboxId, _ttlSeconds) {
-  }
-  async resume(_sandboxId) {
-  }
-  async create(options) {
-    const id = options?.id ?? getShortId();
-    const initialFiles = {};
-    if (options?.initialFiles) {
-      for (const [path, content] of Object.entries(options.initialFiles)) {
-        initialFiles[path] = content;
-      }
-    }
-    const fs = new justBash.InMemoryFs(initialFiles);
-    const sandbox = new InMemorySandboxImpl(id, fs, this.defaultOptions);
-    this.sandboxes.set(id, sandbox);
-    return { sandbox };
-  }
-  async snapshot(sandboxId, _options) {
-    const sandbox = this.sandboxes.get(sandboxId);
-    if (!sandbox) throw new SandboxNotFoundError(sandboxId);
-    const fs = sandbox._getJustBashFs();
-    const paths = fs.getAllPaths();
-    const files = {};
-    for (const p of paths) {
-      try {
-        const stat = await fs.stat(p);
-        if (stat.isFile) {
-          files[p] = await fs.readFile(p);
-        }
-      } catch {
-      }
-    }
-    return {
-      sandboxId,
-      providerId: this.id,
-      data: { files },
-      createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-  }
-  async fork(sandboxId, _options) {
-    const sandbox = await this.get(sandboxId);
-    const entries = await sandbox.fs.readdirWithFileTypes("/");
-    const initialFiles = {};
-    for (const entry of entries) {
-      if (entry.isFile) {
-        initialFiles[entry.name] = await sandbox.fs.readFileBuffer(entry.name);
-      }
-    }
-    const newSandbox = await this.create({
-      id: getShortId(),
-      initialFiles
-    });
-    return newSandbox.sandbox;
-  }
-  async restore(snapshot, _options) {
-    const { files } = snapshot.data;
-    const initialFiles = {};
-    for (const [path, content] of Object.entries(files)) {
-      initialFiles[path] = content;
-    }
-    const fs = new justBash.InMemoryFs(initialFiles);
-    const sandbox = new InMemorySandboxImpl(
-      snapshot.sandboxId,
-      fs,
-      this.defaultOptions
-    );
-    this.sandboxes.set(sandbox.id, sandbox);
-    return sandbox;
-  }
-  async deleteSnapshot(_snapshot) {
-  }
-};
-
-exports.IN_MEMORY_CAPS = IN_MEMORY_CAPS;
-exports.InMemorySandboxProvider = InMemorySandboxProvider;
-//# sourceMappingURL=index.cjs.map
-//# sourceMappingURL=index.cjs.map

package/dist/adapters/sandbox/inmemory/index.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/lib/thread/id.ts","../../../../src/adapters/sandbox/inmemory/index.ts"],"names":["ApplicationFailure","uuid4","Bash","InMemoryFs"],"mappings":";;;;;;;AAsYO,IAAM,oBAAA,GAAN,cAAmCA,yBAAA,CAAmB;AAAA,EAC3D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,SAAS,CAAA,CAAA,EAAI,sBAAA,EAAwB,IAAI,CAAA;AAAA,EACvE;AACF,CAAA;ACxYA,IAAM,MAAA,GAAS,gEAAA;AAaR,SAAS,UAAA,CAAW,SAAS,EAAA,EAAY;AAC9C,EAAA,MAAM,GAAA,GAAMC,cAAA,EAAM,CAAE,OAAA,CAAQ,MAAM,EAAE,CAAA;AACpC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK;AAC/B,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,GAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AACrD,IAAA,MAAA,IAAU,MAAA,CAAO,IAAA,GAAO,MAAA,CAAO,MAAM,CAAA;AAAA,EACvC;AACA,EAAA,OAAO,MAAA;AACT;;;ACKA,SAAS,YAAY,EAAA,EAAoC;AACvD,EAAA,MAAM,aAAA,GAAgB,GAAA;AACtB,EAAA,MAAM,gBAAgB,CAAC,IAAA,KACrB,EAAA,CAAG,WAAA,CAAY,eAAe,IAAI,CAAA;AAEpC,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA,UAAU,CAAC,IAAA,KAAS,GAAG,QAAA,CAAS,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,IACnD,gBAAgB,CAAC,IAAA,KAAS,GAAG,cAAA,CAAe,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,IAC/D,SAAA,EAAW,CAAC,IAAA,EAAM,OAAA,KAAY,GAAG,SAAA,CAAU,aAAA,CAAc,IAAI,CAAA,EAAG,OAAO,CAAA;AAAA,IACvE,UAAA,EAAY,CAAC,IAAA,EAAM,OAAA,KAAY,GAAG,UAAA,CAAW,aAAA,CAAc,IAAI,CAAA,EAAG,OAAO,CAAA;AAAA,IACzE,QAAQ,CAAC,IAAA,KAAS,GAAG,MAAA,CAAO,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,IAC/C,IAAA,EAAM,OAAO,IAAA,KAA4B;AACvC,MAAA,MAAM,IAAI,MAAM,EAAA,CAAG,IAAA,CAAK,aAAA,CAAc,IAAI,CAAC,CAAA;AAC3C,MAAA,OAAO;AAAA,QACL,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,gBAAgB,CAAA,CAAE,cAAA;AAAA,QAClB,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,OAAO,CAAA,CAAE;AAAA,OACX;AAAA,IACF,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,IAAA,EAAM,IAAA,KAAS,GAAG,KAAA,CAAM,aAAA,CAAc,IAAI,CAAA,EAAG,IAAI,CAAA;AAAA,IACzD,SAAS,CAAC,IAAA,KAAS,GAAG,OAAA,CAAQ,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,IACjD,oBAAA,EAAsB,OAAO,IAAA,KAAiC;AAC5D,MAAA,MAAM,OAAA,GAAU,cAAc,IAAI,CAAA;AAClC,MAAA,IAAI,CAAC,GAAG,oBAAA,EAAsB;AAC5B,QAAA,MAAM,KAAA,GAAQ,MAAM,EAAA,CAAG,OAAA,CAAQ,OAAO,CAAA;AACtC,QAAA,OAAO,OAAA,CAAQ,GAAA;AAAA,UACb,KAAA,CAAM,GAAA,CAAI,OAAO,IAAA,KAAS;AACxB,YAAA,MAAM,SAAA,GAAY,EAAA,CAAG,WAAA,CAAY,OAAA,EAAS,IAAI,CAAA;AAC9C,YAAA,MAAM,CAAA,GAAI,MAAM,EAAA,CAAG,IAAA,CAAK,SAAS,CAAA;AACjC,YAAA,OAAO;AAAA,cACL,IAAA;AAAA,cACA,QAAQ,CAAA,CAAE,MAAA;AAAA,cACV,aAAa,CAAA,CAAE,WAAA;AAAA,cACf,gBAAgB,CAAA,CAAE;AAAA,aACpB;AAAA,UACF,CAAC;AAAA,SACH;AAAA,MACF;AACA,MAAA,OAAO,EAAA,CAAG,qBAAqB,OAAO,CAAA;AAAA,IACxC,CAAA;AAAA,IACA,EAAA,EAAI,CAAC,IAAA,EAAM,IAAA,KAAS,GAAG,EAAA,CAAG,aAAA,CAAc,IAAI,CAAA,EAAG,IAAI,CAAA;AAAA,IACnD,EAAA,EAAI,CAAC,GAAA,EAAK,IAAA,EAAM,IAAA,KACd,EAAA,CAAG,EAAA,CAAG,aAAA,CAAc,GAAG,CAAA,EAAG,aAAA,CAAc,IAAI,GAAG,IAAI,CAAA;AAAA,IACrD,EAAA,EAAI,CAAC,GAAA,EAAK,IAAA,KAAS,EAAA,CAAG,EAAA,CAAG,aAAA,CAAc,GAAG,CAAA,EAAG,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,IAChE,UAAU,CAAC,IAAA,KAAS,GAAG,QAAA,CAAS,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,IACnD,WAAA,EAAa,CAAC,IAAA,EAAM,CAAA,KAAM,GAAG,WAAA,CAAY,aAAA,CAAc,IAAI,CAAA,EAAG,CAAC;AAAA,GACjE;AACF;AAgBA,IAAM,sBAAN,MAA6C;AAAA,EAU3C,WAAA,CACW,EAAA,EACD,UAAA,EACR,OAAA,EACA;AAHS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AACD,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAGR,IAAA,IAAA,CAAK,EAAA,GAAK,YAAY,UAAU,CAAA;AAChC,IAAA,IAAA,CAAK,WAAA,GAAc;AAAA,MACjB,eAAA,EAAiB,EAAE,eAAA,EAAiB,QAAA,EAAW;AAAA,MAC/C,GAAG,OAAA,EAAS;AAAA,KACd;AAAA,EACF;AAAA,EATW,EAAA;AAAA,EACD,UAAA;AAAA,EAXD,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EACD,WAAA;AAAA,EAcR,MAAM,IAAA,CAAK,OAAA,EAAiB,QAAA,EAA6C;AACvE,IAAA,MAAM,IAAA,GAAO,IAAIC,aAAA,CAAK,EAAE,GAAG,KAAK,WAAA,EAAa,EAAA,EAAI,IAAA,CAAK,UAAA,EAAY,CAAA;AAClE,IAAA,MAAM,EAAE,UAAU,MAAA,EAAQ,MAAA,KAAW,MAAM,IAAA,CAAK,KAAK,OAAO,CAAA;AAC5D,IAAA,OAAO,EAAE,QAAA,EAAU,MAAA,EAAQ,MAAA,EAAO;AAAA,EACpC;AAAA,EAEA,MAAM,OAAA,GAAyB;AAAA,EAE/B;AAAA;AAAA,EAGA,cAAA,GAA8B;AAC5B,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACd;AACF,CAAA;AAWO,IAAM,cAAA,GAAiB;AAAA,EAC5B,OAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AAGO,IAAM,0BAAN,MAEP;AAAA,EAaE,YAAoB,cAAA,EAAyC;AAAzC,IAAA,IAAA,CAAA,cAAA,GAAA,cAAA;AAAA,EAA0C;AAAA,EAA1C,cAAA;AAAA,EAZX,EAAA,GAAK,UAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EACS,wBAAmD,IAAI,GAAA;AAAA,IAC9D;AAAA,GACF;AAAA,EAEQ,SAAA,uBAAgB,GAAA,EAAiC;AAAA,EAIzD,MAAM,IAAI,EAAA,EAA8B;AACtC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA;AACrC,IAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,qBAAqB,EAAE,CAAA;AAC/C,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,QAAQ,EAAA,EAA2B;AACvC,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA;AACrC,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAM,QAAQ,OAAA,EAAQ;AACtB,MAAA,IAAA,CAAK,SAAA,CAAU,OAAO,EAAE,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,UAAA,EAAoB,WAAA,EAAqC;AAAA,EAErE;AAAA,EAEA,MAAM,OAAO,UAAA,EAAmC;AAAA,EAEhD;AAAA,EAEA,MAAM,OAAO,OAAA,EAA8D;AACzE,IAAA,MAAM,EAAA,GAAK,OAAA,EAAS,EAAA,IAAM,UAAA,EAAW;AACrC,IAAA,MAAM,eAA6B,EAAC;AAEpC,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,KAAA,MAAW,CAAC,MAAM,OAAO,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,EAAG;AAClE,QAAA,YAAA,CAAa,IAAI,CAAA,GAAI,OAAA;AAAA,MACvB;AAAA,IACF;AAEA,IAAA,MAAM,EAAA,GAAK,IAAIC,mBAAA,CAAW,YAAY,CAAA;AACtC,IAAA,MAAM,UAAU,IAAI,mBAAA,CAAoB,EAAA,EAAI,EAAA,EAAI,KAAK,cAAc,CAAA;AACnE,IAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAA,EAAI,OAAO,CAAA;AAC9B,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEA,MAAM,QAAA,CACJ,SAAA,EACA,QAAA,EAC0B;AAC1B,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,SAAS,CAAA;AAC5C,IAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAEtD,IAAA,MAAM,EAAA,GAAK,QAAQ,cAAA,EAAe;AAClC,IAAA,MAAM,KAAA,GAAQ,GAAG,WAAA,EAAY;AAC7B,IAAA,MAAM,QAAgC,EAAC;AAEvC,IAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,EAAA,CAAG,IAAA,CAAK,CAAC,CAAA;AAC5B,QAAA,IAAI,KAAK,MAAA,EAAQ;AACf,UAAA,KAAA,CAAM,CAAC,CAAA,GAAI,MAAM,EAAA,CAAG,SAAS,CAAC,CAAA;AAAA,QAChC;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MACA,YAAY,IAAA,CAAK,EAAA;AAAA,MACjB,IAAA,EAAM,EAAE,KAAA,EAAM;AAAA,MACd,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AAAA,EACF;AAAA,EAEA,MAAM,IAAA,CACJ,SAAA,EACA,QAAA,EACkB;AAClB,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA;AAExC,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,EAAA,CAAG,qBAAqB,GAAG,CAAA;AACzD,IAAA,MAAM,eAA2C,EAAC;AAClD,IAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,MAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,QAAA,YAAA,CAAa,KAAA,CAAM,IAAI,CAAA,GAAI,MAAM,QAAQ,EAAA,CAAG,cAAA,CAAe,MAAM,IAAI,CAAA;AAAA,MACvE;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO;AAAA,MACnC,IAAI,UAAA,EAAW;AAAA,MACf;AAAA,KACD,CAAA;AACD,IAAA,OAAO,UAAA,CAAW,OAAA;AAAA,EACpB;AAAA,EAEA,MAAM,OAAA,CACJ,QAAA,EACA,QAAA,EACkB;AAClB,IAAA,MAAM,EAAE,KAAA,EAAM,GAAI,QAAA,CAAS,IAAA;AAC3B,IAAA,MAAM,eAA6B,EAAC;AACpC,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,OAAO,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnD,MAAA,YAAA,CAAa,IAAI,CAAA,GAAI,OAAA;AAAA,IACvB;AAEA,IAAA,MAAM,EAAA,GAAK,IAAIA,mBAAA,CAAW,YAAY,CAAA;AACtC,IAAA,MAAM,UAAU,IAAI,mBAAA;AAAA,MAClB,QAAA,CAAS,SAAA;AAAA,MACT,EAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,OAAA,CAAQ,EAAA,EAAI,OAAO,CAAA;AACtC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,SAAA,EAA2C;AAAA,EAGhE;AACF","file":"index.cjs","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n// ============================================================================\n// Network & lifecycle\n// ============================================================================\n\nexport interface SandboxNetworkConfig {\n  allowOut?: string[];\n  denyOut?: string[];\n  allowPublicTraffic?: boolean;\n}\n\nexport interface SandboxLifecycleConfig {\n  onTimeout: \"kill\" | \"pause\";\n  autoResume?: boolean;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\n/**\n * Runtime capability flags carried by a {@link Sandbox} instance.\n *\n * These are an orthogonal mechanism to the type-level\n * {@link SandboxCapability} union: this flag bag is for runtime\n * introspection (\"does the sandbox support a filesystem?\") whereas\n * {@link SandboxCapability} narrows the type-level provider/ops contract.\n */\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n/**\n * Type-level capability vocabulary for {@link SandboxProvider} and\n * {@link SandboxOps}. Adapters declare the subset they actually support; the\n * conditional types on each contract gate the corresponding methods so\n * unsupported calls become a compile-time error rather than a runtime\n * {@link SandboxNotSupportedError}.\n *\n * `pause` and `resume` are split because some adapters might support one\n * direction without the other. The `snapshot` cap covers both `snapshot()`\n * and `deleteSnapshot()` since they always travel together in practice.\n */\nexport type SandboxCapability =\n  | \"pause\"\n  | \"resume\"\n  | \"snapshot\"\n  | \"restore\"\n  | \"fork\";\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n  /** Key-value metadata surfaced via provider list/query APIs */\n  metadata?: Record<string, string>;\n  /** Sandbox idle timeout in milliseconds */\n  timeoutMs?: number;\n  /** Enable or disable outbound internet access */\n  allowInternetAccess?: boolean;\n  /** Outbound network allow/deny rules */\n  network?: SandboxNetworkConfig;\n  /** Sandbox timeout behaviour */\n  lifecycle?: SandboxLifecycleConfig;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n}\n\n/**\n * Internal helper: drop keys whose value is `never` from an object type.\n *\n * Used by the capability-gated contracts below so that an absent capability\n * removes the corresponding key entirely, instead of leaving a required\n * field with type `never` (which would make implementations impossible).\n */\ntype OmitNever<T> = {\n  [K in keyof T as [T[K]] extends [never] ? never : K]: T[K];\n};\n\n/**\n * Capability-gated provider lifecycle methods.\n *\n * Each field becomes `never` when its capability is absent from `TCaps`;\n * the wrapping `OmitNever` removes those keys entirely, so the method\n * isn't part of the type surface for adapters that don't support it.\n */\ntype SandboxProviderCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pause: \"pause\" extends TCaps\n    ? (sandboxId: string, ttlSeconds?: number) => Promise<void>\n    : never;\n  resume: \"resume\" extends TCaps ? (sandboxId: string) => Promise<void> : never;\n  snapshot: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restore: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<TSandbox>\n    : never;\n  fork: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<TSandbox>\n    : never;\n}>;\n\n/**\n * Always-present provider lifecycle methods. These do not depend on the\n * capability set and are required by every adapter.\n */\ninterface SandboxProviderBase<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  /**\n   * Runtime-introspectable list of supported capabilities.\n   *\n   * Constrained to `ReadonlySet<TCaps & SandboxCapability>` so the runtime\n   * set cannot include capabilities not declared at the type level — a\n   * provider typed as `SandboxProvider<…, never>` cannot ship a runtime\n   * set that contains `\"pause\"`, etc.\n   *\n   * The other direction (type declares a cap, runtime set omits it)\n   * cannot be enforced by TypeScript alone; adapters should derive both\n   * `TCaps` and the runtime set from the same `as const` array (see\n   * `SandboxManager`'s constructor-time consistency check) so the two\n   * surfaces cannot drift.\n   */\n  readonly supportedCapabilities: ReadonlySet<TCaps & SandboxCapability>;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n}\n\n/**\n * Provider-side sandbox lifecycle contract.\n *\n * Generic over an optional capability set (`TCaps`). Each capability gates\n * a specific method: when the cap is absent the corresponding key is\n * **removed** from the type entirely, so calling it produces a TypeScript\n * error at the call site instead of a runtime\n * {@link SandboxNotSupportedError}.\n *\n * The default `TCaps = SandboxCapability` resolves to the full union, so\n * existing usages that only pass `TOptions` / `TSandbox` continue to see\n * the full method surface (backwards compatible).\n *\n * Adapters that don't support a method should narrow `TCaps` accordingly:\n *\n * - In-memory / E2B: `SandboxCapability` (default — all caps present).\n * - Bedrock Code Interpreter / Daytona: `never` (only base ops).\n * - Bedrock AgentCore Runtime: `\"pause\" | \"resume\"`.\n */\nexport type SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxProviderBase<TOptions, TSandbox, TCaps> &\n  SandboxProviderCapMethods<TOptions, TSandbox, TCaps>;\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\n/**\n * Capability-gated workflow-side methods. Mirrors the provider's gating:\n * keys whose capability is absent from `TCaps` are removed from the type.\n */\ntype SandboxOpsCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pauseSandbox: \"pause\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  resumeSandbox: \"resume\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  snapshotSandbox: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSandboxSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restoreSandbox: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<string>\n    : never;\n  forkSandbox: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<string>\n    : never;\n}>;\n\n/**\n * Always-present workflow-side lifecycle methods.\n */\ninterface SandboxOpsBase<\n  TOptions extends SandboxCreateOptions,\n  TCtx,\n> {\n  createSandbox(\n    options?: TOptions,\n    ctx?: TCtx\n  ): Promise<{ sandboxId: string } | null>;\n  destroySandbox(sandboxId: string): Promise<void>;\n}\n\n/**\n * Workflow-side counterpart to {@link SandboxProvider}. Exposed as a set of\n * Temporal activities and consumed by `createSession`'s `sandboxOps` field\n * and by `defineSubagent`'s `sandbox.proxy`.\n *\n * Generic over a capability set (`TCaps`) — same semantics as the provider:\n * keys whose capability is absent are removed from the type, so calling\n * them is a TypeScript error rather than a runtime throw. The default\n * `TCaps = SandboxCapability` keeps the full method surface for existing\n * consumers.\n */\nexport type SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxOpsBase<TOptions, TCtx> & SandboxOpsCapMethods<TOptions, TCaps>;\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * Inherits the capability gating from {@link SandboxOps}: when `TCaps` omits\n * a capability the prefixed key carries the `never` type so call sites are\n * type-protected.\n *\n * @example\n * ```typescript\n * type InMemOps = PrefixedSandboxOps<\"inMemory\">;\n * // → { inMemoryCreateSandbox, inMemoryDestroySandbox, inMemorySnapshotSandbox, … }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = {\n  [K in keyof SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  > as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  >[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\n/**\n * Thrown by adapters that still surface an unsupported method at runtime.\n *\n * After the capability-generic refactor most adapters drop their\n * unsupported methods entirely so the type system rejects them at call\n * sites. This symbol is still exported so consumers running against older\n * adapter versions can keep their backwards-compatible error-handling\n * paths until they finish migrating.\n */\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import { uuid4 } from \"@temporalio/workflow\";\n\nconst BASE62 = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\n\n/**\n * Generate a compact, workflow-deterministic identifier.\n *\n * Uses Temporal's `uuid4()` internally (seeded by the workflow's RNG),\n * then re-encodes the hex bytes into a base-62 alphabet for a shorter,\n * more token-efficient identifier (~3 tokens vs ~10 for a full UUID).\n *\n * Suitable for thread IDs, child workflow IDs, or any workflow-scoped identifier.\n *\n * @param length - Number of base-62 characters (default 12, ~71 bits of entropy)\n */\nexport function getShortId(length = 12): string {\n  const hex = uuid4().replace(/-/g, \"\");\n  let result = \"\";\n  for (let i = 0; i < length; i++) {\n    const byte = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n    result += BASE62[byte % BASE62.length];\n  }\n  return result;\n}\n","import {\n  Bash,\n  InMemoryFs,\n  type BashOptions,\n  type IFileSystem,\n  type InitialFiles,\n} from \"just-bash\";\nimport type {\n  Sandbox,\n  SandboxCapabilities,\n  SandboxCapability,\n  SandboxCreateOptions,\n  SandboxCreateResult,\n  SandboxFileSystem,\n  SandboxProvider,\n  SandboxSnapshot,\n  ExecOptions,\n  ExecResult,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotFoundError } from \"../../../lib/sandbox/types\";\nimport { getShortId } from \"../../../lib/thread/id\";\n\n// ============================================================================\n// Adapter: IFileSystem → SandboxFileSystem\n// ============================================================================\n\nfunction toSandboxFs(fs: IFileSystem): SandboxFileSystem {\n  const workspaceBase = \"/\";\n  const normalisePath = (path: string): string =>\n    fs.resolvePath(workspaceBase, path);\n\n  return {\n    workspaceBase,\n    readFile: (path) => fs.readFile(normalisePath(path)),\n    readFileBuffer: (path) => fs.readFileBuffer(normalisePath(path)),\n    writeFile: (path, content) => fs.writeFile(normalisePath(path), content),\n    appendFile: (path, content) => fs.appendFile(normalisePath(path), content),\n    exists: (path) => fs.exists(normalisePath(path)),\n    stat: async (path): Promise<FileStat> => {\n      const s = await fs.stat(normalisePath(path));\n      return {\n        isFile: s.isFile,\n        isDirectory: s.isDirectory,\n        isSymbolicLink: s.isSymbolicLink,\n        size: s.size,\n        mtime: s.mtime,\n      };\n    },\n    mkdir: (path, opts) => fs.mkdir(normalisePath(path), opts),\n    readdir: (path) => fs.readdir(normalisePath(path)),\n    readdirWithFileTypes: async (path): Promise<DirentEntry[]> => {\n      const dirPath = normalisePath(path);\n      if (!fs.readdirWithFileTypes) {\n        const names = await fs.readdir(dirPath);\n        return Promise.all(\n          names.map(async (name) => {\n            const childPath = fs.resolvePath(dirPath, name);\n            const s = await fs.stat(childPath);\n            return {\n              name,\n              isFile: s.isFile,\n              isDirectory: s.isDirectory,\n              isSymbolicLink: s.isSymbolicLink,\n            };\n          })\n        );\n      }\n      return fs.readdirWithFileTypes(dirPath);\n    },\n    rm: (path, opts) => fs.rm(normalisePath(path), opts),\n    cp: (src, dest, opts) =>\n      fs.cp(normalisePath(src), normalisePath(dest), opts),\n    mv: (src, dest) => fs.mv(normalisePath(src), normalisePath(dest)),\n    readlink: (path) => fs.readlink(normalisePath(path)),\n    resolvePath: (base, p) => fs.resolvePath(normalisePath(base), p),\n  };\n}\n\n// ============================================================================\n// InMemorySandbox\n// ============================================================================\n\nexport interface InMemorySandboxOptions {\n  /** Options forwarded to `just-bash` `Bash` (minus `fs` which is managed) */\n  bashOptions?: Omit<BashOptions, \"fs\">;\n}\n\n/**\n * An in-memory {@link Sandbox} backed by `just-bash`.\n */\nexport type InMemorySandbox = Sandbox & { fs: SandboxFileSystem };\n\nclass InMemorySandboxImpl implements Sandbox {\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: true,\n  };\n\n  readonly fs: SandboxFileSystem;\n  private bashOptions: Omit<BashOptions, \"fs\">;\n\n  constructor(\n    readonly id: string,\n    private justBashFs: IFileSystem,\n    options?: InMemorySandboxOptions\n  ) {\n    this.fs = toSandboxFs(justBashFs);\n    this.bashOptions = {\n      executionLimits: { maxStringLength: 52_428_800 },\n      ...options?.bashOptions,\n    };\n  }\n\n  async exec(command: string, _options?: ExecOptions): Promise<ExecResult> {\n    const bash = new Bash({ ...this.bashOptions, fs: this.justBashFs });\n    const { exitCode, stderr, stdout } = await bash.exec(command);\n    return { exitCode, stdout, stderr };\n  }\n\n  async destroy(): Promise<void> {\n    // In-memory: nothing to clean up\n  }\n\n  /** Expose the underlying IFileSystem for snapshot serialisation */\n  _getJustBashFs(): IFileSystem {\n    return this.justBashFs;\n  }\n}\n\n// ============================================================================\n// InMemorySandboxProvider\n// ============================================================================\n\n/**\n * Single source of truth for the in-memory adapter's capability set. The\n * runtime `supportedCapabilities` set and the type-level `TCaps` are both\n * derived from this array, so the two surfaces cannot drift.\n */\nexport const IN_MEMORY_CAPS = [\n  \"pause\",\n  \"resume\",\n  \"snapshot\",\n  \"restore\",\n  \"fork\",\n] as const satisfies readonly SandboxCapability[];\nexport type InMemoryCaps = (typeof IN_MEMORY_CAPS)[number];\n\nexport class InMemorySandboxProvider\n  implements SandboxProvider<SandboxCreateOptions, Sandbox, InMemoryCaps>\n{\n  readonly id = \"inMemory\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: true,\n  };\n  readonly supportedCapabilities: ReadonlySet<InMemoryCaps> = new Set(\n    IN_MEMORY_CAPS\n  );\n\n  private sandboxes = new Map<string, InMemorySandboxImpl>();\n\n  constructor(private defaultOptions?: InMemorySandboxOptions) {}\n\n  async get(id: string): Promise<Sandbox> {\n    const sandbox = this.sandboxes.get(id);\n    if (!sandbox) throw new SandboxNotFoundError(id);\n    return sandbox;\n  }\n\n  async destroy(id: string): Promise<void> {\n    const sandbox = this.sandboxes.get(id);\n    if (sandbox) {\n      await sandbox.destroy();\n      this.sandboxes.delete(id);\n    }\n  }\n\n  async pause(_sandboxId: string, _ttlSeconds?: number): Promise<void> {\n    // In-memory: nothing to pause\n  }\n\n  async resume(_sandboxId: string): Promise<void> {\n    // In-memory: nothing to resume\n  }\n\n  async create(options?: SandboxCreateOptions): Promise<SandboxCreateResult> {\n    const id = options?.id ?? getShortId();\n    const initialFiles: InitialFiles = {};\n\n    if (options?.initialFiles) {\n      for (const [path, content] of Object.entries(options.initialFiles)) {\n        initialFiles[path] = content;\n      }\n    }\n\n    const fs = new InMemoryFs(initialFiles);\n    const sandbox = new InMemorySandboxImpl(id, fs, this.defaultOptions);\n    this.sandboxes.set(id, sandbox);\n    return { sandbox };\n  }\n\n  async snapshot(\n    sandboxId: string,\n    _options?: SandboxCreateOptions\n  ): Promise<SandboxSnapshot> {\n    const sandbox = this.sandboxes.get(sandboxId);\n    if (!sandbox) throw new SandboxNotFoundError(sandboxId);\n\n    const fs = sandbox._getJustBashFs();\n    const paths = fs.getAllPaths();\n    const files: Record<string, string> = {};\n\n    for (const p of paths) {\n      try {\n        const stat = await fs.stat(p);\n        if (stat.isFile) {\n          files[p] = await fs.readFile(p);\n        }\n      } catch {\n        // skip entries that can't be read (e.g. broken symlinks)\n      }\n    }\n\n    return {\n      sandboxId,\n      providerId: this.id,\n      data: { files },\n      createdAt: new Date().toISOString(),\n    };\n  }\n\n  async fork(\n    sandboxId: string,\n    _options?: SandboxCreateOptions\n  ): Promise<Sandbox> {\n    const sandbox = await this.get(sandboxId);\n\n    const entries = await sandbox.fs.readdirWithFileTypes(\"/\");\n    const initialFiles: Record<string, Uint8Array> = {};\n    for (const entry of entries) {\n      if (entry.isFile) {\n        initialFiles[entry.name] = await sandbox.fs.readFileBuffer(entry.name);\n      }\n    }\n\n    const newSandbox = await this.create({\n      id: getShortId(),\n      initialFiles,\n    });\n    return newSandbox.sandbox;\n  }\n\n  async restore(\n    snapshot: SandboxSnapshot,\n    _options?: SandboxCreateOptions\n  ): Promise<Sandbox> {\n    const { files } = snapshot.data as { files: Record<string, string> };\n    const initialFiles: InitialFiles = {};\n    for (const [path, content] of Object.entries(files)) {\n      initialFiles[path] = content;\n    }\n\n    const fs = new InMemoryFs(initialFiles);\n    const sandbox = new InMemorySandboxImpl(\n      snapshot.sandboxId,\n      fs,\n      this.defaultOptions\n    );\n    this.sandboxes.set(sandbox.id, sandbox);\n    return sandbox;\n  }\n\n  async deleteSnapshot(_snapshot: SandboxSnapshot): Promise<void> {\n    // In-memory snapshots are opaque data held by the caller — nothing to\n    // delete on the provider side.\n  }\n}\n"]}

package/dist/adapters/sandbox/inmemory/index.d.cts

@@ -1,40 +0,0 @@
-import { BashOptions } from 'just-bash';
-import { b as Sandbox, c as SandboxFileSystem, d as SandboxProvider, a as SandboxCreateOptions, e as SandboxCapabilities, f as SandboxCreateResult, g as SandboxSnapshot } from '../../../types-CJ7tCdl6.cjs';
-import '@temporalio/common';
-
-interface InMemorySandboxOptions {
-    /** Options forwarded to `just-bash` `Bash` (minus `fs` which is managed) */
-    bashOptions?: Omit<BashOptions, "fs">;
-}
-/**
- * An in-memory {@link Sandbox} backed by `just-bash`.
- */
-type InMemorySandbox = Sandbox & {
-    fs: SandboxFileSystem;
-};
-/**
- * Single source of truth for the in-memory adapter's capability set. The
- * runtime `supportedCapabilities` set and the type-level `TCaps` are both
- * derived from this array, so the two surfaces cannot drift.
- */
-declare const IN_MEMORY_CAPS: readonly ["pause", "resume", "snapshot", "restore", "fork"];
-type InMemoryCaps = (typeof IN_MEMORY_CAPS)[number];
-declare class InMemorySandboxProvider implements SandboxProvider<SandboxCreateOptions, Sandbox, InMemoryCaps> {
-    private defaultOptions?;
-    readonly id = "inMemory";
-    readonly capabilities: SandboxCapabilities;
-    readonly supportedCapabilities: ReadonlySet<InMemoryCaps>;
-    private sandboxes;
-    constructor(defaultOptions?: InMemorySandboxOptions | undefined);
-    get(id: string): Promise<Sandbox>;
-    destroy(id: string): Promise<void>;
-    pause(_sandboxId: string, _ttlSeconds?: number): Promise<void>;
-    resume(_sandboxId: string): Promise<void>;
-    create(options?: SandboxCreateOptions): Promise<SandboxCreateResult>;
-    snapshot(sandboxId: string, _options?: SandboxCreateOptions): Promise<SandboxSnapshot>;
-    fork(sandboxId: string, _options?: SandboxCreateOptions): Promise<Sandbox>;
-    restore(snapshot: SandboxSnapshot, _options?: SandboxCreateOptions): Promise<Sandbox>;
-    deleteSnapshot(_snapshot: SandboxSnapshot): Promise<void>;
-}
-
-export { IN_MEMORY_CAPS, type InMemoryCaps, type InMemorySandbox, type InMemorySandboxOptions, InMemorySandboxProvider };

package/dist/adapters/sandbox/inmemory/index.d.ts

@@ -1,40 +0,0 @@
-import { BashOptions } from 'just-bash';
-import { b as Sandbox, c as SandboxFileSystem, d as SandboxProvider, a as SandboxCreateOptions, e as SandboxCapabilities, f as SandboxCreateResult, g as SandboxSnapshot } from '../../../types-CJ7tCdl6.js';
-import '@temporalio/common';
-
-interface InMemorySandboxOptions {
-    /** Options forwarded to `just-bash` `Bash` (minus `fs` which is managed) */
-    bashOptions?: Omit<BashOptions, "fs">;
-}
-/**
- * An in-memory {@link Sandbox} backed by `just-bash`.
- */
-type InMemorySandbox = Sandbox & {
-    fs: SandboxFileSystem;
-};
-/**
- * Single source of truth for the in-memory adapter's capability set. The
- * runtime `supportedCapabilities` set and the type-level `TCaps` are both
- * derived from this array, so the two surfaces cannot drift.
- */
-declare const IN_MEMORY_CAPS: readonly ["pause", "resume", "snapshot", "restore", "fork"];
-type InMemoryCaps = (typeof IN_MEMORY_CAPS)[number];
-declare class InMemorySandboxProvider implements SandboxProvider<SandboxCreateOptions, Sandbox, InMemoryCaps> {
-    private defaultOptions?;
-    readonly id = "inMemory";
-    readonly capabilities: SandboxCapabilities;
-    readonly supportedCapabilities: ReadonlySet<InMemoryCaps>;
-    private sandboxes;
-    constructor(defaultOptions?: InMemorySandboxOptions | undefined);
-    get(id: string): Promise<Sandbox>;
-    destroy(id: string): Promise<void>;
-    pause(_sandboxId: string, _ttlSeconds?: number): Promise<void>;
-    resume(_sandboxId: string): Promise<void>;
-    create(options?: SandboxCreateOptions): Promise<SandboxCreateResult>;
-    snapshot(sandboxId: string, _options?: SandboxCreateOptions): Promise<SandboxSnapshot>;
-    fork(sandboxId: string, _options?: SandboxCreateOptions): Promise<Sandbox>;
-    restore(snapshot: SandboxSnapshot, _options?: SandboxCreateOptions): Promise<Sandbox>;
-    deleteSnapshot(_snapshot: SandboxSnapshot): Promise<void>;
-}
-
-export { IN_MEMORY_CAPS, type InMemoryCaps, type InMemorySandbox, type InMemorySandboxOptions, InMemorySandboxProvider };

package/dist/adapters/sandbox/inmemory/index.js

@@ -1,211 +0,0 @@
-import { InMemoryFs, Bash } from 'just-bash';
-import { ApplicationFailure } from '@temporalio/common';
-import { uuid4 } from '@temporalio/workflow';
-
-// src/adapters/sandbox/inmemory/index.ts
-var SandboxNotFoundError = class extends ApplicationFailure {
-  constructor(sandboxId) {
-    super(`Sandbox not found: ${sandboxId}`, "SandboxNotFoundError", true);
-  }
-};
-var BASE62 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
-function getShortId(length = 12) {
-  const hex = uuid4().replace(/-/g, "");
-  let result = "";
-  for (let i = 0; i < length; i++) {
-    const byte = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-    result += BASE62[byte % BASE62.length];
-  }
-  return result;
-}
-
-// src/adapters/sandbox/inmemory/index.ts
-function toSandboxFs(fs) {
-  const workspaceBase = "/";
-  const normalisePath = (path) => fs.resolvePath(workspaceBase, path);
-  return {
-    workspaceBase,
-    readFile: (path) => fs.readFile(normalisePath(path)),
-    readFileBuffer: (path) => fs.readFileBuffer(normalisePath(path)),
-    writeFile: (path, content) => fs.writeFile(normalisePath(path), content),
-    appendFile: (path, content) => fs.appendFile(normalisePath(path), content),
-    exists: (path) => fs.exists(normalisePath(path)),
-    stat: async (path) => {
-      const s = await fs.stat(normalisePath(path));
-      return {
-        isFile: s.isFile,
-        isDirectory: s.isDirectory,
-        isSymbolicLink: s.isSymbolicLink,
-        size: s.size,
-        mtime: s.mtime
-      };
-    },
-    mkdir: (path, opts) => fs.mkdir(normalisePath(path), opts),
-    readdir: (path) => fs.readdir(normalisePath(path)),
-    readdirWithFileTypes: async (path) => {
-      const dirPath = normalisePath(path);
-      if (!fs.readdirWithFileTypes) {
-        const names = await fs.readdir(dirPath);
-        return Promise.all(
-          names.map(async (name) => {
-            const childPath = fs.resolvePath(dirPath, name);
-            const s = await fs.stat(childPath);
-            return {
-              name,
-              isFile: s.isFile,
-              isDirectory: s.isDirectory,
-              isSymbolicLink: s.isSymbolicLink
-            };
-          })
-        );
-      }
-      return fs.readdirWithFileTypes(dirPath);
-    },
-    rm: (path, opts) => fs.rm(normalisePath(path), opts),
-    cp: (src, dest, opts) => fs.cp(normalisePath(src), normalisePath(dest), opts),
-    mv: (src, dest) => fs.mv(normalisePath(src), normalisePath(dest)),
-    readlink: (path) => fs.readlink(normalisePath(path)),
-    resolvePath: (base, p) => fs.resolvePath(normalisePath(base), p)
-  };
-}
-var InMemorySandboxImpl = class {
-  constructor(id, justBashFs, options) {
-    this.id = id;
-    this.justBashFs = justBashFs;
-    this.fs = toSandboxFs(justBashFs);
-    this.bashOptions = {
-      executionLimits: { maxStringLength: 52428800 },
-      ...options?.bashOptions
-    };
-  }
-  id;
-  justBashFs;
-  capabilities = {
-    filesystem: true,
-    execution: true,
-    persistence: true
-  };
-  fs;
-  bashOptions;
-  async exec(command, _options) {
-    const bash = new Bash({ ...this.bashOptions, fs: this.justBashFs });
-    const { exitCode, stderr, stdout } = await bash.exec(command);
-    return { exitCode, stdout, stderr };
-  }
-  async destroy() {
-  }
-  /** Expose the underlying IFileSystem for snapshot serialisation */
-  _getJustBashFs() {
-    return this.justBashFs;
-  }
-};
-var IN_MEMORY_CAPS = [
-  "pause",
-  "resume",
-  "snapshot",
-  "restore",
-  "fork"
-];
-var InMemorySandboxProvider = class {
-  constructor(defaultOptions) {
-    this.defaultOptions = defaultOptions;
-  }
-  defaultOptions;
-  id = "inMemory";
-  capabilities = {
-    filesystem: true,
-    execution: true,
-    persistence: true
-  };
-  supportedCapabilities = new Set(
-    IN_MEMORY_CAPS
-  );
-  sandboxes = /* @__PURE__ */ new Map();
-  async get(id) {
-    const sandbox = this.sandboxes.get(id);
-    if (!sandbox) throw new SandboxNotFoundError(id);
-    return sandbox;
-  }
-  async destroy(id) {
-    const sandbox = this.sandboxes.get(id);
-    if (sandbox) {
-      await sandbox.destroy();
-      this.sandboxes.delete(id);
-    }
-  }
-  async pause(_sandboxId, _ttlSeconds) {
-  }
-  async resume(_sandboxId) {
-  }
-  async create(options) {
-    const id = options?.id ?? getShortId();
-    const initialFiles = {};
-    if (options?.initialFiles) {
-      for (const [path, content] of Object.entries(options.initialFiles)) {
-        initialFiles[path] = content;
-      }
-    }
-    const fs = new InMemoryFs(initialFiles);
-    const sandbox = new InMemorySandboxImpl(id, fs, this.defaultOptions);
-    this.sandboxes.set(id, sandbox);
-    return { sandbox };
-  }
-  async snapshot(sandboxId, _options) {
-    const sandbox = this.sandboxes.get(sandboxId);
-    if (!sandbox) throw new SandboxNotFoundError(sandboxId);
-    const fs = sandbox._getJustBashFs();
-    const paths = fs.getAllPaths();
-    const files = {};
-    for (const p of paths) {
-      try {
-        const stat = await fs.stat(p);
-        if (stat.isFile) {
-          files[p] = await fs.readFile(p);
-        }
-      } catch {
-      }
-    }
-    return {
-      sandboxId,
-      providerId: this.id,
-      data: { files },
-      createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-  }
-  async fork(sandboxId, _options) {
-    const sandbox = await this.get(sandboxId);
-    const entries = await sandbox.fs.readdirWithFileTypes("/");
-    const initialFiles = {};
-    for (const entry of entries) {
-      if (entry.isFile) {
-        initialFiles[entry.name] = await sandbox.fs.readFileBuffer(entry.name);
-      }
-    }
-    const newSandbox = await this.create({
-      id: getShortId(),
-      initialFiles
-    });
-    return newSandbox.sandbox;
-  }
-  async restore(snapshot, _options) {
-    const { files } = snapshot.data;
-    const initialFiles = {};
-    for (const [path, content] of Object.entries(files)) {
-      initialFiles[path] = content;
-    }
-    const fs = new InMemoryFs(initialFiles);
-    const sandbox = new InMemorySandboxImpl(
-      snapshot.sandboxId,
-      fs,
-      this.defaultOptions
-    );
-    this.sandboxes.set(sandbox.id, sandbox);
-    return sandbox;
-  }
-  async deleteSnapshot(_snapshot) {
-  }
-};
-
-export { IN_MEMORY_CAPS, InMemorySandboxProvider };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map